Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BbQFJsdihXPJ7toycY6vTcHUeRyTQrKxR6WqpdKgvw6H/1/3133382e302e37322e302f32322d3332203d3e20323634353331.roa
File:                     3133382e302e37322e302f32322d3332203d3e20323634353331.roa (raw, json)
Hash identifier:          lVJNCbdNRWMSPDvFieBJp3QUrVu+zI1LOfVswXLhwWc=
Subject key identifier:   C1:E9:CE:9A:4A:22:83:D6:F3:D5:22:A7:87:1D:21:FB:03:22:E7:45
Certificate issuer:       /CN=678744E2F008A98B388D024DEEAB7AEEF09D3883
Certificate serial:       53D05909E897FFF7DD32375627A37A146EC3AF47
Authority key identifier: 67:87:44:E2:F0:08:A9:8B:38:8D:02:4D:EE:AB:7A:EE:F0:9D:38:83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/678744E2F008A98B388D024DEEAB7AEEF09D3883.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BbQFJsdihXPJ7toycY6vTcHUeRyTQrKxR6WqpdKgvw6H/1/3133382e302e37322e302f32322d3332203d3e20323634353331.roa
Signing time:             Thu 04 Apr 2024 02:12:28 +0000
ROA not before:           Thu 04 Apr 2024 02:07:28 +0000
ROA not after:            Thu 03 Apr 2025 02:12:28 +0000
asID:                     264531
IP address blocks:        138.0.72.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BbQFJsdihXPJ7toycY6vTcHUeRyTQrKxR6WqpdKgvw6H/1/678744E2F008A98B388D024DEEAB7AEEF09D3883.crl
                          rsync://rpki-repo.registro.br/repo/BbQFJsdihXPJ7toycY6vTcHUeRyTQrKxR6WqpdKgvw6H/1/678744E2F008A98B388D024DEEAB7AEEF09D3883.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/678744E2F008A98B388D024DEEAB7AEEF09D3883.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:47:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:d0:59:09:e8:97:ff:f7:dd:32:37:56:27:a3:7a:14:6e:c3:af:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=678744E2F008A98B388D024DEEAB7AEEF09D3883
        Validity
            Not Before: Apr  4 02:07:28 2024 GMT
            Not After : Apr  3 02:12:28 2025 GMT
        Subject: CN=C1E9CE9A4A2283D6F3D522A7871D21FB0322E745
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:b8:9d:be:0a:82:12:71:9b:ee:d3:4f:3d:15:
                    f9:9f:0b:c9:ce:74:3e:80:c1:cf:6f:a3:e4:0e:d5:
                    a0:32:23:f0:71:27:20:1d:87:b6:ae:04:b1:1c:47:
                    dd:7f:28:aa:11:a7:7c:0e:fb:c8:7c:35:f8:ac:32:
                    d3:15:9c:0a:d5:61:c8:d7:6f:69:63:eb:1a:88:31:
                    10:ba:53:ef:79:83:4a:89:35:2e:bd:67:2f:5e:90:
                    cb:47:9c:ce:10:83:70:e8:10:9c:6c:56:b4:2b:3c:
                    f3:5e:cb:39:11:41:86:f1:7c:76:dc:cb:e1:6e:1b:
                    37:26:00:c0:c2:de:8f:8d:bb:2c:f8:7f:7a:8e:8d:
                    15:c2:74:2e:ed:c1:86:67:9f:f0:c0:f6:24:12:61:
                    1b:9c:7e:3d:30:06:79:c5:69:69:65:83:6a:30:0b:
                    70:ad:99:41:cd:60:84:e2:05:86:80:0e:b0:43:f5:
                    7d:4f:27:cb:e1:10:23:0c:78:30:bb:39:48:03:55:
                    a7:59:9a:61:19:8f:c5:df:12:52:ee:d6:c5:c8:40:
                    27:37:ad:95:33:fe:7f:b5:a1:58:10:51:47:79:c5:
                    d2:b7:e4:b8:d3:2e:cc:45:ff:35:99:e0:9a:55:4c:
                    33:33:62:97:49:37:e5:5d:ab:30:9d:0c:3d:11:f7:
                    f5:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:E9:CE:9A:4A:22:83:D6:F3:D5:22:A7:87:1D:21:FB:03:22:E7:45
            X509v3 Authority Key Identifier:
                keyid:67:87:44:E2:F0:08:A9:8B:38:8D:02:4D:EE:AB:7A:EE:F0:9D:38:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BbQFJsdihXPJ7toycY6vTcHUeRyTQrKxR6WqpdKgvw6H/1/678744E2F008A98B388D024DEEAB7AEEF09D3883.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/678744E2F008A98B388D024DEEAB7AEEF09D3883.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BbQFJsdihXPJ7toycY6vTcHUeRyTQrKxR6WqpdKgvw6H/1/3133382e302e37322e302f32322d3332203d3e20323634353331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         62:be:1f:2a:dc:91:19:47:d1:bb:28:04:bf:d9:8e:44:2e:34:
         f8:22:cd:34:fd:e3:44:90:70:cd:b3:25:49:d9:23:62:5e:22:
         fd:df:d0:6b:17:00:55:36:3f:4e:4f:87:3b:53:6f:0e:27:5d:
         f5:e0:21:8b:24:32:21:b6:60:b7:51:e8:9c:92:4c:a8:f0:83:
         6b:0c:c9:d1:52:9c:ff:98:0e:52:7e:b5:00:bc:f9:3b:f0:80:
         74:02:84:93:f2:37:26:5f:fc:bc:51:a3:0e:db:85:7f:ec:43:
         3d:ce:c8:d9:ae:07:85:25:23:97:ef:4a:3b:0a:c5:57:1b:77:
         fa:13:4e:44:9e:4f:db:e5:69:7d:1c:2e:f0:18:23:f4:f3:01:
         bb:e4:10:a2:0e:d8:93:32:c0:ce:95:fb:e2:56:7e:2b:22:bf:
         e6:c0:a6:99:a1:c6:d9:3a:cf:07:61:88:38:ec:de:fe:b1:2e:
         eb:b1:72:80:5a:40:cf:6d:9a:d9:aa:d1:c8:02:13:82:8f:c0:
         de:da:3d:6e:00:cd:28:c7:e2:f3:89:a3:ea:00:11:13:5a:b1:
         2b:fe:70:27:e3:75:b4:12:dc:c7:53:cc:68:b4:07:01:cb:8a:
         19:88:48:1d:fa:02:ba:e2:2f:c6:99:02:7c:a3:f5:16:d4:09:
         d9:4a:df:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:44:02 2024 by rpki-client on console-ams.rpki-client.org